Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia

  • Size

    467KB

  • Sample

    240221-rx4k3shf92

  • MD5

    539e45f32ec42e3aaf67ed756f202264

  • SHA1

    d6fc607b42fd0e958695fad85f4e61ab597f3d72

  • SHA256

    f0f5166c18e7ac7f36dde51d9fb0e717b44b6791e4767b95a92e2c43d0826cc9

  • SHA512

    7f8f7e79c3f9bcf651f4cc6f89ebbf2997e3bd500f187c6213e2458ad4d82193c94d76b0ffc95b82ec07bf796df9ee9098265d37e9911dabf530546c3b83cfac

  • SSDEEP

    12288:Bb4bZudi79LA+Y1fZFGSv6mkZqHoEQOsn0Ak:Bb4bcdkLAX1Bn9pnQOsS

Score
7/10

Malware Config

Targets

    • Target

      2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia

    • Size

      467KB

    • MD5

      539e45f32ec42e3aaf67ed756f202264

    • SHA1

      d6fc607b42fd0e958695fad85f4e61ab597f3d72

    • SHA256

      f0f5166c18e7ac7f36dde51d9fb0e717b44b6791e4767b95a92e2c43d0826cc9

    • SHA512

      7f8f7e79c3f9bcf651f4cc6f89ebbf2997e3bd500f187c6213e2458ad4d82193c94d76b0ffc95b82ec07bf796df9ee9098265d37e9911dabf530546c3b83cfac

    • SSDEEP

      12288:Bb4bZudi79LA+Y1fZFGSv6mkZqHoEQOsn0Ak:Bb4bcdkLAX1Bn9pnQOsS

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks